Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6ffd4ea4-c0e0-421c-8c01-6a17d9f8daf5.roa
File:                     6ffd4ea4-c0e0-421c-8c01-6a17d9f8daf5.roa (raw, json)
Hash identifier:          4B5b+q5c4fllHT2l9N9DObLOMZAuUAleo3YiFB8a6rI=
Subject key identifier:   1B:96:69:3A:49:92:77:B6:54:55:D9:5F:1A:2B:E0:AA:77:91:43:B1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4990E49EB1C072106183E28F7AB4C2D5AEFAF424
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6ffd4ea4-c0e0-421c-8c01-6a17d9f8daf5.roa
Signing time:             Fri 31 Oct 2025 07:07:00 +0000
ROA not before:           Fri 31 Oct 2025 07:07:00 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c60::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:90:e4:9e:b1:c0:72:10:61:83:e2:8f:7a:b4:c2:d5:ae:fa:f4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 07:07:00 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=56ff1df0ba839c8d2da5522f35ea0d6afef06b22f691ed9df6a33f69ecec8241, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f4:8c:99:68:10:b2:93:79:2f:76:05:6d:52:
                    36:f7:48:69:5c:93:50:03:ae:f0:91:0d:14:51:58:
                    85:2b:71:bb:2c:bf:e2:87:88:3d:59:48:7a:7f:7c:
                    12:13:bc:05:ce:34:e6:ea:3b:92:5f:bb:1c:a5:35:
                    ad:23:10:11:68:2a:5e:f0:75:40:2c:f9:05:3e:e6:
                    cd:c1:17:81:92:72:40:35:ad:6f:15:a0:7e:44:80:
                    7c:9d:fa:b9:11:8d:fe:70:f9:e1:20:ec:a1:43:9e:
                    7d:59:8a:6d:a5:fd:52:a1:1e:95:58:ad:96:1b:7e:
                    92:4f:fa:3a:9c:40:88:1a:29:42:af:f0:4b:3a:37:
                    35:1c:10:e3:b6:d7:ec:b1:23:3d:44:79:93:4f:9a:
                    14:46:73:08:f4:a3:1a:16:3d:8a:ba:e5:2b:63:53:
                    f7:e6:9e:c2:09:fa:2a:b8:67:8f:23:07:c0:3e:35:
                    f1:f1:7a:9b:95:d0:b8:74:61:d6:b4:d7:29:17:a7:
                    0a:56:f2:06:dd:69:f3:6e:bd:b8:51:b9:18:65:6b:
                    61:bd:12:14:54:6d:b5:9a:3e:cc:03:82:66:87:da:
                    fe:b4:db:e8:d2:4f:3b:98:db:0a:2c:f3:4b:b5:4f:
                    a1:bc:9f:d5:57:9f:fb:4d:75:95:26:7b:02:16:40:
                    6f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:96:69:3A:49:92:77:B6:54:55:D9:5F:1A:2B:E0:AA:77:91:43:B1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6ffd4ea4-c0e0-421c-8c01-6a17d9f8daf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c60::/44

    Signature Algorithm: sha256WithRSAEncryption
         c1:d4:d3:85:ee:e7:58:67:00:97:06:9b:3c:dc:33:50:37:20:
         38:a9:ea:f7:23:a6:a8:fb:0b:80:ed:51:99:4f:b4:29:60:35:
         5f:ee:fe:08:af:80:24:6e:63:95:a2:e9:f7:46:6b:21:4c:d7:
         3c:52:ab:a6:5f:20:80:ff:0e:5d:f4:ef:cd:cd:d0:bd:dd:ec:
         19:bb:ed:bc:80:bd:16:2b:fa:d1:7e:1d:07:ca:44:1e:62:33:
         7f:03:13:10:ee:aa:c6:91:70:f1:f6:46:a0:d2:41:f9:5b:6d:
         d3:14:e8:2b:4a:15:7a:b8:51:be:71:f2:f0:a9:05:a0:2b:66:
         0b:ec:62:e4:9a:5e:a9:f0:b8:4f:55:d4:56:b2:f1:64:03:b5:
         4b:e3:00:25:d7:b9:84:37:77:2b:fa:1a:98:1e:ad:3a:a7:5a:
         1c:ac:99:a5:63:8c:bf:cf:34:37:54:d8:7d:62:17:93:90:cd:
         ba:d1:c4:d5:c3:3a:79:29:a6:b7:f5:14:c2:83:04:52:58:5c:
         ed:ce:a8:0a:e6:10:81:ec:a7:f1:9f:48:25:db:6a:8b:c4:b6:
         69:e7:2d:50:16:59:fe:07:ff:e8:54:3d:d6:15:8f:65:cb:6b:
         01:93:7f:5d:1a:2a:24:96:fd:98:24:75:8d:52:bc:ca:2f:aa:
         aa:d1:a3:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:18 2025 by rpki-client